Open to opportunities

Sandeep Rane

@sandeeprane

Message

Dedicated information security professional with 14+ years of experience.

India

Message

What I'm looking for

I am looking for a managerial role that fosters growth, collaboration, and innovation in information security.

I am a dedicated information security professional with over 14 years of technology experience, primarily focusing on PCI DSS and GRC consulting and auditing. My career has been driven by a passion for learning new technologies and implementing them to create business opportunities. I am currently seeking a managerial role in information security and risk management, where I can leverage my extensive knowledge and experience to help organizations achieve their strategic and operational goals.

Throughout my career, I have developed comprehensive expertise in various domains, including IT Risk Management, PCI-DSS Auditing, GDPR, and HITRUST CSF. My experience spans across conducting PCI DSS certification assessments, risk assessments, and IT audits for the BFSI sector. I have successfully managed external security audits and implemented security solutions, ensuring compliance with international standards and best practices.

I pride myself on my ability to collaborate effectively with diverse teams and stakeholders, both internally and externally. My goal is to contribute to a growth-oriented organization where I can apply my skills in cybersecurity consulting, governance, risk management, and compliance to drive success and innovation.

Experience

Work history, roles, and key accomplishments

Current

Senior Lead - Compliance

Current

Newfold Digital Inc.

May 2022 - Present (3 years)

Conducted internal PCI DSS gap analysis, information security audits, and risk assessments for SMEs and large brands. Identified, assessed, and mitigated IT risks through effective control implementation and utilized ServiceNow GRC tools for tracking and reporting.

PCI DSS Security Auditing Risk Assessment IT Risk Management ISO 27001 Compliance

Lead Consultant

Wipro Technology

Oct 2021 - Apr 2022 (6 months)

Safeguarded information system assets by identifying and resolving security problems, defining access privileges, and implementing security improvements. Managed and executed technology audits, including Cybersecurity, IT Risk Management, Cloud, and Infrastructure Security.

Cybersecurity IT Risk Management Project Management Cloud Security Infrastructure Security IT General Controls Security Auditing Information Security

PCI QSA and Senior Manager

ControlCase International Pvt. Ltd.

Mar 2016 - Oct 2021 (5 years 7 months)

Led PCI DSS Gap Analysis, information security audits, and risk assessments, providing consultation for HIPAA/HITRUST standards. Performed PCI-DSS audits for diverse organizations including Banks, Payment Gateways, and BPOs, ensuring compliance with various security frameworks.

PCI DSS Security Auditing Risk Assessment HIPAA HITRUST GDPR RBI PPI Risk Frameworks Consulting

Operational Security Officer (OSO)

Atos India Pvt Ltd.

Apr 2014 - Feb 2016 (1 year 10 months)

Served as an Operational Security Officer, collaborating with clients across Europe and India to ensure IT audit compliance with ISO 27001:2013. Programmed and performed internal audits, reviewed findings, and provided guidance on IS Audit perspectives to various business groups.

IT Audit ISO 27001 Internal Audit Audit Compliance Risk Management

Engineer-Business Productivity

Wipro InfoTech Ltd.

Dec 2011 - Apr 2014 (2 years 4 months)

Functioned as a member of the Microsoft product implementation team, overseeing the delivery of critical projects within the banking sector. Focused on enhancing business productivity through effective software deployment and project management.

Microsoft Products Implementation Project Delivery Business Productivity Software Deployment

System Administrator

Larsen & Toubro InfoTech Ltd.

May 2011 - Nov 2011 (6 months)

Worked as a System Administrator, responsible for the installation and administration of System Center product suites, specifically SCCM. Ensured efficient system operation and maintenance.

System Administration SCCM Installation Configuration IT Operations Maintenance

Technology Specialist

Embee Software Pvt. Ltd.

Nov 2010 - May 2011 (6 months)

Served as a Technology Specialist, focusing on the installation and configuration of Microsoft Active Directory infrastructure. Provided essential troubleshooting for operating system and application-related issues.

Active Directory Troubleshooting Infrastructure IT Support System Configuration

Technical Support Engineer

Wipro InfoTech Ltd.

Apr 2008 - Nov 2010 (2 years 7 months)

Provided first-level technical support to clients, effectively resolving a wide range of technical issues. Maintained high levels of client satisfaction through prompt and efficient problem-solving.

Technical Support Troubleshooting Customer Service Problem Solving

Education

Degrees, certifications, and relevant coursework

Sikkim Manipal University (SMU)

Master of Computer Application, Computer Application

Completed a Master's degree focusing on advanced computer applications. Gained expertise in software development, system analysis, and IT management.

Mumbai University (Garware Institute)

Post-Graduation Diploma in Computer Programming & System Analysis, Computer Programming & System Analysis

Pursued a Post-Graduation Diploma in Computer Programming and System Analysis. Developed strong skills in programming languages and system design principles.